``role::reverse_proxy``
=======================

A reverse proxy based on Apache, which maps a set of URLs to other URLs on
various backend systems.


Parameters
----------

===========  =========  ============
**Name**     **Type**   **Default**
-----------  ---------  ------------
tls_cert     string
tls_chain    string
tls_key      string
backends     hash
allow_from   string
===========  =========  ============


``tls_cert``
~~~~~~~~~~~~

The TLS certificate (PEM).


``tls_chain``
~~~~~~~~~~~~~

The TLS certificate chain, ie. the intermediate certificate concatenated with
the host's certificate.


``tls_key``
~~~~~~~~~~~

The TLS key (PEM). **Must be encrypted**!


``backends``
~~~~~~~~~~~~

A hash describing the URLs to be proxied. The keys are the URLs relative to the
hostname, the values are hashes containing the following keys:

- ``url``: the URL to forward requests to


``allow_from``
~~~~~~~~~~~~~~

An expression controlling access to the reverse proxy. Syntax as described in
the `Apache manual
<https://httpd.apache.org/docs/2.4/de/mod/mod_access_compat.html#allow>`_
